What we store

• Profile info: Your legal name, current mailing address, email, and phone number. Stored encrypted at rest in Supabase (AES-256).
• Filed claim record: A log of which settlements you filed, the date, and whether the administrator has issued payment. We keep this for 7 years for legal compliance and payment tracking.
• Signature: A one-time signature capture per claim. Never reused across settlements. Stored only long enough to embed in the PDF, then deleted from our servers.

What we do not store

• Payment info. Settlements pay you directly — we never see the money. Pro subscription payments go through Apple/Google/RevenueCat; we never see your card.
• SSN / financial account numbers. Class action forms do not require these. If a form ever asks (rare), the app blanks the field — you fill it manually.
• Browsing/behavioral profiles. We do not track cross-app behavior. GA4 on the website uses only anonymized traffic data; user-provided data collection is off.

Who has access to your data

• You. Fully view + export + delete your data from the app at any time.
• Our two engineers. Read-only access to production Supabase for debugging + support. Access is audit-logged.
• Settlement administrators. When you file a claim, they get your name, address, and signature on the PDF. That is the whole point — the administrator needs to know who to pay.
• No one else. We never sell, rent, or share your data with advertisers or data brokers. See our privacy policy for full details.

Infrastructure

• Backend: Supabase (US East region, SOC 2 Type II certified).
• Web: TLS 1.3 with HSTS preload eligibility. All connections encrypted in transit.
• App: React Native / Expo SDK 54. Reviewed by Apple + Google on each release.
• Auth: Supabase Auth with password hashing (bcrypt) + optional Google / Apple Sign In.

Account deletion

You can delete your account from the app at any time (Settings → Account → Delete). Profile and subscription records are permanently wiped within 24 hours. However, filed-claim records and consent-to-file audit logs are retained for 7 years under legal compliance requirements. See privacy policy for the full retention schedule.

Reporting a security issue

Email security@classactionbuddy.com. We respond within 24 hours. Responsible disclosure appreciated; no bounty program yet.